$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d47026a9-0c9a-4d79-ad67-2c9dbd366d0b/0/731D5D59A9238F79E8E4540B7BF8839F824AA2E6.mft File: 731D5D59A9238F79E8E4540B7BF8839F824AA2E6.mft (raw, json) Hash identifier: 6j0g+Go/bY+ZSFCL/yKHbH00xsSRzxq1LNpYI7CJzfI= Subject key identifier: 47:33:2E:E2:9E:D7:A2:9E:1C:3D:D3:D2:7C:93:50:D4:B9:8C:16:99 Authority key identifier: 73:1D:5D:59:A9:23:8F:79:E8:E4:54:0B:7B:F8:83:9F:82:4A:A2:E6 Certificate issuer: /CN=731D5D59A9238F79E8E4540B7BF8839F824AA2E6 Certificate serial: 412E9727EFDD85761D221ECD3171D399F9217674 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/731D5D59A9238F79E8E4540B7BF8839F824AA2E6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d47026a9-0c9a-4d79-ad67-2c9dbd366d0b/0/731D5D59A9238F79E8E4540B7BF8839F824AA2E6.mft Manifest number: F9 Signing time: Sun 01 Nov 2026 21:04:05 +0000 Manifest this update: Sun 01 Nov 2026 20:59:05 +0000 Manifest next update: Mon 02 Nov 2026 22:20:05 +0000 Files and hashes: 1: 731D5D59A9238F79E8E4540B7BF8839F824AA2E6.crl (hash: gN9D8uW9q4ev3eXc4l5fYaV+vJiVpplzWes0LxGrjz0=) 2: 3130332e3135312e3134302e302f32342d3234203d3e20313430343137.roa (hash: 7y63iJCGDmrcEh1jqQU2gg7glBcuAKKg0zd+7G7d+bQ=) 3: 3130332e3135312e3134302e302f32332d3233203d3e20313430343137.roa (hash: +l7H6IXgAvTv+3glkvk8VLjCw4Za7qX1HwAcAg3brR0=) 4: 3130332e3135312e3134312e302f32342d3234203d3e20313430343137.roa (hash: QdzlneLR96UmFIEO68sW2//pwgyJaL9xwxIxX7KunXo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d47026a9-0c9a-4d79-ad67-2c9dbd366d0b/0/731D5D59A9238F79E8E4540B7BF8839F824AA2E6.crl rsync://rpki-rsync.idnic.net/repo/d47026a9-0c9a-4d79-ad67-2c9dbd366d0b/0/731D5D59A9238F79E8E4540B7BF8839F824AA2E6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/731D5D59A9238F79E8E4540B7BF8839F824AA2E6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Nov 2026 22:20:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:2e:97:27:ef:dd:85:76:1d:22:1e:cd:31:71:d3:99:f9:21:76:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=731D5D59A9238F79E8E4540B7BF8839F824AA2E6 Validity Not Before: Nov 1 20:59:05 2026 GMT Not After : Nov 2 22:20:05 2026 GMT Subject: CN=47332EE29ED7A29E1C3DD3D27C9350D4B98C1699 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:b0:12:48:a8:a6:78:ff:8a:d5:79:dc:29:20: 4b:5b:62:0d:ed:68:23:66:35:cc:9b:9b:5c:5a:b4: d8:a6:62:3b:f0:38:49:fa:25:49:d7:71:82:b4:ae: 1b:75:8a:cc:9f:f2:45:c1:8b:02:15:0c:ad:2f:62: 1f:e9:1b:75:ba:99:89:c7:70:94:2c:89:ab:89:b9: 46:75:a7:1c:f0:45:8e:47:77:61:aa:c9:10:5b:00: 91:5a:f4:e2:8b:bf:68:34:7a:75:87:0b:4f:5d:9c: 9a:67:c9:da:df:16:9f:d3:90:0e:e5:49:26:9a:07: 78:f9:8c:b3:47:9f:ea:c5:a3:e9:29:4f:61:f9:fc: 5a:e4:cd:66:a5:e2:9f:ad:e8:8c:6b:ad:8e:0d:af: 97:79:71:17:b3:72:31:a4:6d:b4:75:28:ca:3f:91: 21:21:28:d6:be:93:4e:b1:d6:f2:17:6c:66:0e:bb: 3a:8b:d0:6e:af:c7:2e:3b:b3:fc:d7:8f:44:99:fb: d0:aa:98:14:f9:fb:a5:75:a3:d7:d1:03:1a:28:bb: fd:b5:95:43:25:d5:76:20:c2:0d:23:12:8a:e3:31: 51:aa:0e:9d:38:5a:8f:b7:80:47:72:3b:6f:6b:e4: c0:ae:13:17:82:09:0e:c6:8e:c3:5a:cb:bf:3d:ed: d0:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:33:2E:E2:9E:D7:A2:9E:1C:3D:D3:D2:7C:93:50:D4:B9:8C:16:99 X509v3 Authority Key Identifier: keyid:73:1D:5D:59:A9:23:8F:79:E8:E4:54:0B:7B:F8:83:9F:82:4A:A2:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d47026a9-0c9a-4d79-ad67-2c9dbd366d0b/0/731D5D59A9238F79E8E4540B7BF8839F824AA2E6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/731D5D59A9238F79E8E4540B7BF8839F824AA2E6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d47026a9-0c9a-4d79-ad67-2c9dbd366d0b/0/731D5D59A9238F79E8E4540B7BF8839F824AA2E6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d9:bb:63:4c:c0:ae:ed:b0:44:d6:84:3b:c6:2a:9e:f4:b2:7c: e5:62:1a:0b:19:6b:90:87:32:a1:9b:67:fd:a1:2f:09:45:3f: ef:ee:b5:98:70:ae:9c:5f:82:d4:65:79:c9:30:66:d8:40:7b: 95:a6:68:78:00:22:40:03:28:00:f2:77:c0:0d:f1:83:b2:46: ca:22:9e:56:18:ba:e5:18:57:f9:cf:e9:f5:3e:48:73:a5:6f: 48:17:a4:19:e0:a5:b6:9d:d9:0c:c4:cf:f5:27:5d:7f:b9:93: ef:4f:85:63:a1:93:79:0a:8d:67:6f:ce:ca:4d:54:40:aa:be: dc:9f:2a:16:93:1d:cf:b1:ed:a3:23:31:bb:0b:b5:4c:51:d3: ee:69:75:e5:bb:ac:6c:78:d9:e3:cb:44:66:a4:b0:59:7c:8a: dc:ad:5d:05:13:6a:af:5f:66:37:71:fd:a6:4a:56:30:7b:63: 1c:be:d7:cd:49:5e:b6:5b:70:c4:86:70:89:7b:25:be:f0:eb: b8:a7:5b:b6:91:e2:a5:6d:00:4b:93:27:6b:5f:2b:b6:12:59: 12:2b:d6:04:15:32:ea:3e:c6:f6:9e:0e:ca:41:03:d1:c9:f1: cb:59:7e:d4:cf:5e:94:26:d1:0b:d3:4b:30:e2:35:ed:ae:ea: d0:f8:64:be -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQS6XJ+/dhXYdIh7NMXHTmfkhdnQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzMxRDVENTlBOTIzOEY3OUU4RTQ1NDBCN0JGODgzOUY4 MjRBQTJFNjAeFw0yNjExMDEyMDU5MDVaFw0yNjExMDIyMjIwMDVaMDMxMTAvBgNV BAMTKDQ3MzMyRUUyOUVEN0EyOUUxQzNERDNEMjdDOTM1MEQ0Qjk4QzE2OTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUsBJIqKZ4/4rVedwpIEtbYg3t aCNmNcybm1xatNimYjvwOEn6JUnXcYK0rht1isyf8kXBiwIVDK0vYh/pG3W6mYnH cJQsiauJuUZ1pxzwRY5Hd2GqyRBbAJFa9OKLv2g0enWHC09dnJpnydrfFp/TkA7l SSaaB3j5jLNHn+rFo+kpT2H5/FrkzWal4p+t6IxrrY4Nr5d5cRezcjGkbbR1KMo/ kSEhKNa+k06x1vIXbGYOuzqL0G6vxy47s/zXj0SZ+9CqmBT5+6V1o9fRAxoou/21 lUMl1XYgwg0jEorjMVGqDp04Wo+3gEdyO29r5MCuExeCCQ7GjsNay7897dAZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURzMu4p7Xop4cPdPSfJNQ1LmMFpkwHwYDVR0j BBgwFoAUcx1dWakjj3no5FQLe/iDn4JKouYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDQ3MDI2YTktMGM5YS00ZDc5LWFkNjctMmM5ZGJkMzY2ZDBiLzAvNzMxRDVENTlB OTIzOEY3OUU4RTQ1NDBCN0JGODgzOUY4MjRBQTJFNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83MzFENUQ1OUE5MjM4Rjc5RThFNDU0MEI3QkY4ODM5RjgyNEFB MkU2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDQ3MDI2YTktMGM5YS00ZDc5LWFk NjctMmM5ZGJkMzY2ZDBiLzAvNzMxRDVENTlBOTIzOEY3OUU4RTQ1NDBCN0JGODgz OUY4MjRBQTJFNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANm7Y0zAru2wRNaEO8YqnvSyfOViGgsZa5CH MqGbZ/2hLwlFP+/utZhwrpxfgtRleckwZthAe5WmaHgAIkADKADyd8AN8YOyRsoi nlYYuuUYV/nP6fU+SHOlb0gXpBngpbad2QzEz/UnXX+5k+9PhWOhk3kKjWdvzspN VECqvtyfKhaTHc+x7aMjMbsLtUxR0+5pdeW7rGx42ePLRGaksFl8itytXQUTaq9f Zjdx/aZKVjB7Yxy+181JXrZbcMSGcIl7Jb7w67inW7aR4qVtAEuTJ2tfK7YSWRIr 1gQVMuo+xvaeDspBA9HJ8ctZftTPXpQm0QvTSzDiNe2u6tD4ZL4= -----END CERTIFICATE-----Generated at Mon Nov 2 12:13:50 2026 by rpki-client